4

I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the password enformcement are manage for the domain controllers, it is possible apply a different password policy for some users? Or the same seeting will be apply to all users when the DC's apply the GPO?

Regards, Amedina

Alberto Medina
  • 299
  • 1
  • 9
  • Remember that when you change the policy, new passwords will not be forced to follow the new policy until the old passwords expire. – Clayton Aug 07 '18 at 15:55

1 Answers1

5

My first answer was utter nonsense, sorry. Here we go:

If you are on Windows 2008 or higher (as you should), you can use Fine-Grained Password Policies.

Using the "new" Active Directory Administrative Center you can set these quite easily.

The gist is:

  1. Navigate to -> System -> Password Settings Container
  2. Create a new password policy
  3. Set the users / groups to which it should be applied
Lenniey
  • 5,090
  • 2
  • 17
  • 28